[kratuspneuma]

Instead of a shitty tutorial, explain why the code is vulnerable and what is going on.

Man,

Not so much to explain, is so simple but, here we go:

1- The developer left the code open to download others files out of the original scope, in this case "download.asp" is vulnerable

2 - We get the index(or another file) with the paths to others that has the credentials to DB, in this case: Includes/connection.asp

3 - With the DB credentials in your hands, you can search for the management site logon users (to defacers), delete tables to (kiddies), upload a shell and creat a backdoor to use as bot, in my case I have access to a .gov web site of my city for own business..